Wordfence Security plugin e suʻesuʻe nofoaga WordPress mo tulafono leaga

Va'aiga ma fa'afitauliWordPressTolu-vaega plugins / meafaigaluega mo tulafono leaga (trojans / backdoors).

Chen WeiliangFa'aoga FautuainaWordPress plugin- Polokalama puipuiga malu puipuia Wordfence.

• O se faʻapipiʻi saogalemu WordPress e faʻavae i luga o le pa puipui ma le suʻesuʻeina o tulafono leaga.
• E fausia ma tausia e se 'au tele, 100% taulaʻi ile saogalemu o WordPress.

Wordfence Security plugin download

E ui lava o loʻo i ai se module totogi, e mafai ona matou faʻaogaina le module free "Scan" e suʻesuʻe ai la matou upega tafaʻilagi mo faila PHP ma le "code leaga".

E ui lava o loʻo i ai se fua faatatau sese sese:

• E mafua ona o faʻamatalaga sese o nisi o plugins totogi ma vaega faʻailoga autu.
• Ae ui i lea, o le sailia o "tulafono leaga" ma le Wordfence Security e mautinoa lava o se auala aoga.
• Ole tatalaina soo ole Wordfence Security plugin e le fautuaina.
• Ona o lona puipui puipui ma le puipuiga malu, o le a mafua ai se avega mamafa i luga o faʻamaumauga, lea o le a aʻafia ai le faʻatinoga atoa o le upega tafaʻilagi.

E masani lava, a e manaʻomia le faʻaogaina o se plugin, faʻataʻitaʻi le siaki "Scan" siaki.

A maeʻa, tapuni le plugin ma teu mo le faʻaoga i le lumanaʻi.

Aisea e aliali mai ai le fa'atonuga "E le'i atoatoa le fa'apipi'iina o upu"?

Ona o isi mea fa'apipi'i fa'apea ua fa'apipi'iina, o lo'o i ai se "fete'ena'iga" na tupu, na'o le fa'agata o isi mea fa'apipi'i saogalemu.

O le a se mea e tatau ona ou faia pe afai e le mafai ona fa'alauiloa lelei le Polokalama Wordfence pe a uma ona fa'agata isi mea fa'apipi'i saogalemu?

E mafai ona e fa'ata'ita'i le SSH fa'atonu e toe amata auaunaga nei ▼

systemctl restart httpd
systemctl restart nginx
systemctl restart mariadb
systemctl restart memcached

I'uga o su'ega, ua manuia le amataina o le Wordfence plug-in.

Fa'afefea ona fa'atulaga Wordfence?

E masani lava, e mafai ona e mulimulitaʻi i tulaga le lelei o le Wordfence plugin.

E fa'afefea ona fa'atulaga le Wordfence plugin scan?

Kiliki Va'aiga → Filifili Filifiliga ma Fa'asologa → Filifiliga Fa'ailoga Autu ▼

• Fautuaga mo le "Standard Scan":O matou fautuaga mo upegatafa'ilagi uma.Tuuina atu le gafatia sili ona iloa i le alamanuia.
• Filifili e na'o le setiina o le ma'ale'ale maualuga pe'ā fa'aleaga lau 'upega tafa'ilagi:Mo tagata e ona le saite e manatu atonu na faʻafefe.E sili atu le mae'ae'a, ae mafai ona maua ai ni fa'ailoga sese.

O le a se mea e tatau ona ou faia pe a iai se mea sese ile Wordfence scan?

Afai e te faʻaogaina le Wordfence plugin e faʻataʻitaʻi ai, o loʻo faʻaalia le savali sese:

Wordfence su'esu'e 'au'au: cURL sese 28: Fa'amuta le feso'ota'iga pe a uma le 10000 milliseconds

Fa'atulagaina le auala e foia ai le sese o le Wordfence scan:

Laasaga 1: I Wordfence → "Meafaigaluega" → "Diagnostics" → "Filifiliga Debugging":
Taumafai e fa'agaoioi pe fa'amalo le "Amata uma su'esu'ega mamao (fa'ata'ita'i le mea lea pe a le amata au su'esu'ega ma o lau 'upega tafa'ilagi e avanoa lautele)"

Laasaga 2:Toe amata le auaunaga a Apache ▼

systemctl restart httpd

A maeʻa ona toe amataina le auaunaga a Apache, e masani lava ona foia"Wordfence scanning servers: cURL error 28: Connection timed out after 10000 milliseconds"e sese.

O le a le mea e tatau ona ou faia pe a le manuia le Wordfence scan?

O le a se mea e tatau ona ou faia pe a faʻafuaseʻi ona le mafai e le Wordfence plug-in ona faʻataʻitaʻiina ma taofi i le faagasologa o le faʻataʻitaʻiga, ma faʻaalia le faʻataʻitaʻiga faʻaletonu o loʻo mulimuli mai?

E foliga mai ua le manuia le su'esu'ega o iai nei.O lona fa'afouga tulaga mulimuli o le 8 minute talu ai.E mafai ona e fa'atali pea mo le toe fa'aauau pe taofi ma toe amata le su'ega.Atonu e mana'omia e nisi o saite le fa'alogo ina ia fa'amoemoeina ai su'ega.Kiliki iinei mo laasaga e mafai ona e taumafai.

Po'o le fe'au fa'aletonu o lo'o i lalo:

E foliga mai ua le manuia le su'esu'ega o iai nei.O lona fa'afouga tulaga mulimuli o 5 minute Muamua.E mafai ona e fa'atali pea mo le toe fa'aauau pe taofi ma toe amata le su'ega.Atonu e mana'omia e nisi o saite le fa'alogo ina ia fa'amoemoeina ai su'ega. Kiliki iinei mo laasaga e mafai ona e taumafai.

Fofo:

1. Kiliki le "Fa'aleaogaina le Vaaiga";
2. Taumafai e toe amata le Wordfence plugin;
3. faapena foiTau lava o le taumafai e siaki le saogalemu.

Wordfence Plugin Notes

Fa'amatalaga ile fa'aogaina ole Wordfence Security Plugin:

• Ina ia faʻamautinoa se suʻesuʻega mautu, e sili ona faʻamalo uma isi plugins (naʻo Wordfence security plugins e mafai) aʻo leʻi amataina le "Scan".
• Talu ai ona o su'esu'ega a le Wordfence Security Plugin e mafai ona fa'atupu ai le uta o le PPU a le server, e fautuaina e su'esu'e vave i le taeao po'o le taimi o feoaiga i luga ole laiga.
• Matou te faʻaaogaina le tulafono "scan" a Wordfence Security mo tulafono leaga, o lea ia faʻalogo i le ala o faila php masalosalo na faʻaosofia i le suʻesuʻeina o taunuuga, ina ia faigofie ona faʻapipiʻi lima ma faʻamama ma tape.

Chen WeiliangO lenei blog tutorial na taʻua, WordPress theme malicious code analysis ▼

O le a le fa'ailoga leaga ole autu ole WordPress?Su'esu'ega fa'ailoga leaga ile upega tafa'ilagi

Toeitiiti lava 90% e mafua mai i le "malicious code". E sili atu i le 80% o saite WordPress o faʻapipiʻi ia e aumaia ai tulafono leaga i totonu o faʻamatalaga i luga o le upega tafaʻilagi (o loʻo i ai faʻapipiʻi upega tafaʻilagi aloaia, faʻapipiʻi i luga ole laiga, ma isi).O le isi o le autu (vaega ta'e, autu pirated) o le "tulafono leaga" po o le "ina ua uma...

3rd Party Tools Su'e Trojan Backdoors

O le mea moni, o loʻo i ai se isi meafaigaluega faʻale-aganuʻu o le auala sili lea e maua ai le faʻailoga leaga i faila PHP - Microsoft's MSE.

• E mafai ona matou siiina mai faila PHP i le lotoifale, o le mea lea e mafai ai e le Microsoft's MSE su'esu'eina su'esu'ega ona maua ai le "mality code", "Trojan horse", ma le "backdoor".
• E le gata ina sili atu le malosi nai lo le "360 Security Guard" a Saina, "Tencent Computer Manager" ma le "Kingshan Drug Tyrant".
• E tele a matou mea faigaluega 3rd party e filifili mai ai, faamolemole filifili e tusa ai ma lou lava tulaga.

O le WordPress ecosystem e sili ona lelei:

• O le i ai o faʻapipiʻi saogalemu e pei o Wordfence Security, e mafai ona foia le faʻafitauli o le WordPress malicious code.

Faaiuga

Mulimuli ane,Chen WeiliangO le a toe faamamafaina:

1. O le tele o plugini ma autu a WordPress o se "pelu matalua".
2. E tatau i tagata uma ona faʻaeteete pe a filifilia ma faʻaogaina plugins ma autu.
3. Ona o le autu autu o le le saogalemu o WordPress o plugins ma autu, e le o pulea aloaia e WordPress.
4. O lo'o tu'uina mai e se tagata fa'atupuina lona tolu.
5. E fautuaina e fa'aaoga pea le Wordfence security plugin tumau.
6. Mo le fuafuaina e faʻagaioia se upega tafaʻilagiInitaneti MaketiTagata, e fautuaina e faʻatau moni WordPress plugins ma autu.
7. Ona o le faomea, e mafai ona natia e lomiga saoloto le lamatiaga o le "tulafono leaga".